WebScarab

{{Short description|Web security tool}}

{{Update|date=October 2023}}

{{Infobox software

| name = WebScarab

| developer = The Open Web Application Security Project

| programming language = Java

| license = GPLv2

| website = {{URL|http://www.owasp.org/index.php/Webscarab|WebScarab}}

}}

File:Webscarab.png

WebScarab is a web security application testing tool. It serves as a proxy that intercepts and allows people to alter web browser web requests (both HTTP and HTTPS) and web server replies. WebScarab also may record traffic for further review.{{Cite book |last=Hope |first=Brian |url=http://archive.org/details/websecuritytesti00hope |title=Web security testing cookbook : systematic techniques to find problems fast |last2=Walther |first2=Ben |date=2009 |publisher=Sebastopol, Ca. : O'Reilly |others=Internet Archive |isbn=978-0-596-51483-9}}

Overview

WebScarab is an open source tool developed by The Open Web Application Security Project (OWASP), and was implemented in Java so it could run across multiple operating systems.{{Cite web |title=Website Design for Crafting a Captivating Online Presence |url=https://arkansas.dev/search-management/website-design/ |access-date=2023-10-20 |language=en-US}}

In 2013 official development of WebScarab slowed, and it appears that OWASP's Zed Attack Proxy ("ZAP") Project (another Java-based, open source proxy tool but with more features and active development) is WebScarab's official successor,{{cite web |title=OWASP-WebScarab check-in history |url=https://github.com/OWASP/OWASP-WebScarab |publisher=GitHub |accessdate=5 May 2014}}{{cite web|title=zaproxy change list|url=https://code.google.com/p/zaproxy/source/list|publisher=Google Code|accessdate=5 May 2014}} although ZAP itself was forked from the Paros Proxy, not WebScarab.{{cite web|title=OWASP Zed Attack Proxy Project - Features |url=https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project#tab=Features |publisher=OWASP |accessdate=5 May 2014}}

References

{{reflist}}